<div dir="ltr"><div>Why are you not changing the config in keycloak.json? The way you do it now you may end up with a different URL used to exchange code->token and to refresh tokens.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 19 May 2016 at 07:30, Subhrajyoti Moitra <span dir="ltr"><<a href="mailto:subhrajyotim@gmail.com" target="_blank">subhrajyotim@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>Hello Stian,<br></div>Thanks for responding.<br></div>Our Keycloak SSO is a single server, but the clients are load balanced.<br></div>We just set the redirect_url value to the LB url in the keycloak.login() call, thats it.<br></div>It seems to be working without any issues, detected so far.<br> :)<br><br></div><div>Thanks a lot again for looking into this.<br></div><div>Regards,<br></div><div>Subhro.<br></div><div><br></div><br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 19, 2016 at 10:28 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">You need to configure the correct auth-server-url in keycloak.json for your application using keycloak.js. It should be the loadbalancer URL.</div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On 10 May 2016 at 15:11, Subhrajyoti Moitra <span dir="ltr"><<a href="mailto:subhrajyotim@gmail.com" target="_blank">subhrajyotim@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr"><div><div><div><div><div><div><div><div><div>Hello,<br></div>I have a client application, that will be using Keycloak for authentication and authorization.<br></div>There are 2 instances of this application running on (lets say) service1 and service2.<br><br></div>These 2 service instance are behind the load balancer. The load balancer has sticky sessions on.<br><br></div><div>Now a user browses to the loadbalancer url, which in turn serves the service instances, service1 or service2.<br></div>Now when the service instance pages are using keycloak.js to verify the login, I dont get the loadbalancer URL as the redirect url value, rather the redirect url is of the actual service instance URL on which the service is hosted.<br><br></div>How do i use Keycloak for loadbalanced services?<br><br></div>Is there some specific setting, or setup of the server?<br><br></div>Please help and guide,<br></div>Thanks and cheers,<br></div>Subhro.<br></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>